{
  config,
  pkgs,
  inputs,
  nixos-hardware,
  ...
}: {
  imports = [
    ../../common/users.nix
    ./hardware-configuration.nix
  ];

  elss = {
    # base system
    base.enable = true;
    # setup locale and font settings
    locale.enable = true;
    # setup sshd
    sshd.enable = true;
    # configure zsh
    zsh.enable = true;
    # enable X11 with lightdm and i3
    graphical = {
      enable = false;
      # set dpi if used in mobile applications
      #      dpi = 180;
    };

    # enable deamon to generate nix-index-db
    nix-index-db-update.enable = false;

    # add TUD vpn
    openvpn.enable = false;

    # enable sops
    sops = {
      enable = true;
    };

    # enable server services
    server = {
      enable = true;
      acme.staging = false;
    };

    # enable wireguard
    wireguard.enable = true;


    # user setup
    users = {
      enable = true;
      admins = ["ellmau"];
      users = [];

      meta = {
        ellmau.git = {
          signDefault = false;
        };
      };
    };
  };
  fileSystems."/".options = ["noatime"];
  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;

  # qemu agent
  services.qemuGuest.enable = true;

  networking = {
    interfaces.ens3 = {
      ipv4.addresses = [
        {
          address = "89.58.45.113";
          prefixLength = 22;
        }
      ];
      ipv6.addresses = [
        {
          address = "fe80::94e0:6eff:fecd:d6cb";
          prefixLength = 64;
        }
      ];
    };
    defaultGateway = "89.58.44.1";
    defaultGateway6 = {
      address = "fe80::1";
      interface = "ens3";
    };

    nat = {
      enable = true;
      externalInterface = "ens3";
      internalInterfaces = ["wg-stelnet"];
    };
  };
  system.stateVersion = "22.05";
}